! Generated by Network Security Policy Compiler, version 2.170

! [ BEGIN router:y2 ]
! [ Model = IOS_FW ]
! [ Routing ]
! route network:a -> interface:x.b
ip route 10.1.1.0 255.255.255.0	10.1.2.1
! route network:d -> interface:z.c
ip route 10.1.255.0 255.255.255.0	20.1.3.3
! [ ACL ]
! interface:y2.b
ip access-list extended Fastethernet0/0_in
! permit src=network:b; dst=auto_network:HSRP_multicast; srv=auto_srv:HSRP;
 permit udp 10.1.2.0 0.0.0.255  host 224.0.0.2 eq 1985
! deny src=network:0/0; dst=interface:y2.b; srv=auto_srv:ip;
 deny ip any  host 10.1.2.3 
 deny ip any  host 10.1.2.22 
! deny src=network:0/0; dst=interface:y2.c; srv=auto_srv:ip;
 deny ip any  host 10.1.3.2 
! permit src=host:a1; dst=network:c; srv=service:ping;
 permit icmp host 10.1.1.10  10.1.3.0 0.0.0.255 8
! permit src=host:a1; dst=network:d; srv=service:ping;
 permit icmp host 10.1.1.10  10.1.255.0 0.0.0.255 8
! deny src=network:0/0; dst=network:0/0; srv=auto_srv:ip;
 deny ip any  any 
interface Fastethernet0/0
 ip access-group Fastethernet0/0_in in

! interface:y2.c
ip access-list extended Fastethernet0/1_in
! deny src=network:0/0; dst=network:0/0; srv=auto_srv:ip;
 deny ip any  any 
interface Fastethernet0/1
 ip access-group Fastethernet0/1_in in

! [ END router:y2 ]